Exploit / PoCcriticalExploited in the wild

CISA adds Log4Shell flaw to the Known Exploited Vulnerabilities Catalog

Security Affairsby @securityaffairsDec 13, 2021 · 13:44 UTC (Dec 13, 2021)2 min read4 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-44228 CVE-2021-44515 CVE-2021-44168 CVE-2021-35394 CVE-2020-8816 CVE-2020-17463 CVE-2019-7238 CVE-2019-13272 CVE-2019-10758 CVE-2019-0193 CVE-2017-17562 CVE-2017-12149 CVE-2010-1871

Tags: cve-2021-44228 cve-2021-44515 cve-2021-44168 cve-2021-35394 cve-2020-8816 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2010-1871	Remote Code Execution via EL Injection in Red Hat JBoss Seam 2 (JBoss EAP 4.3.0)	—	83%	KEV	— KEV Dec 10, 2021
CVE-2017-12149	Unauthenticated Deserialization RCE in Red Hat JBoss EAP 5.2 HTTP Invoker	9.8	91%	KEVRansomware	Oct 4, 2017 KEV Dec 10, 2021
CVE-2017-17562	Unauthenticated RCE in Embedthis GoAhead Web Server via CGI LD_PRELOAD injection	8.1	97%	KEVPoC ×3	Dec 12, 2017 KEV Dec 10, 2021
CVE-2019-0193	Code Injection RCE in Apache Solr DataImportHandler (DIH)	7.2	84%	KEV	Aug 1, 2019 KEV Dec 10, 2021
CVE-2019-10758	Authenticated Remote Code Execution in mongo-express web admin UI	9.9	85%	KEVPoC	Dec 24, 2019 KEV Dec 10, 2021
CVE-2019-13272	Local Privilege Escalation to Root in Linux Kernel ptrace (pkexec PTRACE_TRACEME)	7.8	52%	KEVPoC ×5	Jul 17, 2019 KEV Dec 10, 2021
CVE-2019-7238	Incorrect Access Control in Sonatype Nexus Repository Manager before 3.15.0	9.8	77%	KEV	Mar 21, 2019 KEV Dec 10, 2021
CVE-2020-17463	Unauthenticated SQL Injection in FUEL CMS 1.4.7	9.8	90%	KEVPoC	Aug 13, 2020 KEV Dec 10, 2021
CVE-2020-8816	Authenticated Command Injection RCE in Pi-hole AdminLTE Web Dashboard	7.2	78%	KEVPoC	May 29, 2020 KEV Dec 10, 2021
CVE-2021-35394	Remote Code Execution via Memory Corruption in Realtek Jungle SDK	9.8	100%	KEVPoC	Aug 16, 2021 KEV Dec 10, 2021
CVE-2021-44168	Local Arbitrary File Download Flaw in Fortinet FortiOS 'execute restore src-vis'	7.8	<1%	KEV	Jan 4, 2022 KEV Dec 10, 2021
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2021-44515	Authentication Bypass Leading to RCE in Zoho ManageEngine Desktop Central	9.8	100%	KEVPoC	Dec 12, 2021 KEV Dec 10, 2021

From the original article

2 min read at securityaffairs.com

The U. S. CISA added 13 new vulnerabilities to the Known Exploited Vulnerabilities Catalog, including Apache Log4Shell Log4j and Fortinet FortiOS issues .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.